CVE-2015-3238
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.7%
The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
Produtos afetados
n/a · n/aReferências
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1640.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1228571https://security.gentoo.org/glsa/201605-05https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011/?fid=6551https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238/http://www.openwall.com/lists/oss-security/2015/06/25/13http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlhttp://www.securityfocus.com/bid/75428http://www.ubuntu.com/usn/USN-2935-1http://www.ubuntu.com/usn/USN-2935-2